HOW TO REMOVE REGSVR.EXE MANUALLY ?

Regsvr.exe is a W32.Imaut worm which creates folders and a registry entry to enable its automatic execution at every system startup.It also creates Autorun.inf file for its auto execution.One of its salient feature is, it speards easily into exernal USB harddrives when plugged into the infected system.
SOLUTION

1. First search for autorun.inf file.It would be in Read Mode normally you need to change it by right clicking the file , selecting the properties and un-check the read only option.
2. Now Open the file in notepad and delete everything and save it.
3. Change the file status to read only mode so that the virus could not get access again.
4. Click on Start->run and type msconfig
5. Search for regsvr and uncheck any options, click OK.
6. Now goto Control Panel -> Scheduled Tasks, and delete the At 1task which would be listed here.
7. Now type regedit in the Run dialog to open the registry editor.
8. Select on Edit -> Find and search for regsvr.exe
9. Delete all the occurrences of regsvr.exe
10. Now browse to entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon and modify the entry Shell = Explorer.exe regsvr.exe to delete the regsvr.exe from here also.
11. Now finally goto System 32 Folder and search for regsvr.exe. But before that uncheck Hide Protected System Files and Folders for viewing it.

Do leave your comments and any other way to approach this problem, and i will be glad to add that too with this article. Thanks for reading.

MediaFire link

: Source code of this Regsvr.exe

COMPUTER VIRUS WITH HUMAN VOICE

This seems a very first virus that his been built with the Human Voice. Its BotVoice.A which prevents users from working with the computer properly, as it does not allow the files with certain extensions from being run: BAT, COM, EXE and MP3 files, among others. It disables the Task Manager and the Windows Registry Editor. It does not spread automatically by its own means.

Affected Platforms: Windows 2003/XP/2000/NT/ME/98/95

Detected On: June 28, 2007

Additionally, it disables the Task Manager and the Windows Registry Editor.

BotVoice.A does not spread automatically using its own means. It needs an attacking user’s intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.

BotVoice.A is easy to recognize, as once it is run, the following message is heard repeatedly:

You have been infected I repeat You have been infected and your system files has been deleted. Sorry. Have a Nice Day and bye bye

If you want to listen to the message that BotVoice.A is continuously repeating, click here.

PROCESS EXPLORER: FORCEFULLY QUIT UNWANTED PROCESS IN YOUR WINDOWS PC

Process Explorer is a freeware from Microsoft. It shows information about which handles and DLLs processes have opened or loaded.Helps while the virus stops access to taskbar manager and registry editor.

“The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you’ll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you’ll see the DLLs and memory-mapped files that the process has loaded.Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.”

Source : http://technet.microsoft.com

REMOVE RECYCLE BIN FROM YOUR DESKTOP

What is Windows Registry ?

The Windows Registry is a hierarchical database that stores configuration settings and options on Microsoft Windows operating systems. It contains settings for low-level operating system components as well as the applications running on the platform: the kernel, device drivers, services, SAM, user interface and third party applications all make use of the Registry. The registry also provides a means to access counters for profiling system performance.When first introduced with Windows 3.1, the Windows registry’s primary purpose was to store configuration information for COM-based components. With the introduction of Windows 95 and Windows NT, its use was extended to tidy up the profusion of per-program INI files that had previously been used to store configuration settings for Windows programs.

Goto Run->type “regedit” without quotes
Registry 

Key:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BitBucketModify/Create the Value Data Type(s) and Value Name(s) as detailed below.

Data Type: DWORD

Value Name: NukeOnDeleteSetting for Value Data: [0 = Use Recycle Bin / 1 = Permanently Delete] Exit Registry and Reboot


Another Method:
start->run->gpedit.msc-> user configuration ->desktop->remove recycle bin from desktop->double click->change it not configured to enable->apply and ok.
Now come to start->run->gpupdate.exe and press enter.
Your recycle bin icon is gone from desktop and you will need to revert your settings for get that back.
After reverting setting make sure to run gpupdate.exe command  .

HOW TO HIDE HARD DISK PARTITIONS IN WINDOWS ?

Want to hide your hard disk partition fully in windows operating system ? There is a command available to do this task. It is “diskpart” command which needs to be used in command prompt to get the job done. This technique works only in windows operating systems.
                       

Using this command you can hide the hard disk volumes such as C:\ ,D:\, E:\. Here is the step by step method to carry over it.

1.Type “diskpart” in run command box without quotes. (A command window will get opened)

2.Then type “list volume“. (Your hard disk partitioned volumes will be listed)

3. Now type “select volume <volume number>” – (Volume number is the numeric variable which is shown in the volume listing)

4. Type “remove letter <volume letter> – (Volume letter is the alphabetic character of the drive such as C,D,E,F…Z)

Thus your hard disk partition is hidden. If you need to resume it then follow the first three steps as usual and 

in the fourth step replace “remove” with “assign“. I hope this technique helps.

HOW TO PROTECT A FOLDER? [WITHOUT TOOL]

It is important to protect important folders when more than one users use the same system. There are huge number of ways for protecting folders such as

• Hiding Folder
• Folder Lock Tools
• System Security Tools
• Coding

Here we see the simple method for hiding folders using some set of bath file codes not tools. Follow the steps to do so.


Note: Batch File should be saved in folder location.

Lock Folder Code:
1. open a notepad and type the code
ren foldername foldername.{21EC2020-3AEA-1069-A2DD-08002B30309D}
2.  save the file as lock.bat, then double click to lock the folder.
                   

Unlock Code:

1. open a notepad and type the code

ren foldername.{21EC2020-3AEA-1069-A2DD-08002B30309D} foldername

2.  save the file as key.bat, then double click to unlock the folder.

                                       

GENERATING HEXAGONAL CELL SITE WITH RANDOM USERS IN MATLAB

This code will generate Hexagonal Cell Site in Matlab.

I’d used this Cell generation code in one of my Projects in which I’d to perform Monte Carlo simulationwith users being generated in a hexagonal cell site

In this code, the cell radius was 1.4 units.

You can alter this. For eg. If your cell radius needs to be 1 unit then replace

1.40 by 1
2.42 (1.4 x 1.732) by 1.732 (1 x 1.732)
1.21 (1.4 x 0.866) by 0.866 (1 x 0.866)
2.10 (1.4 x 1.500) by 1.500 (1 x 1.500)

Also adjust xa, xb, ya & yb accordingly.

01	% Yogesh Mhatre || IGOY.IN

02

clc;

03	clear all;

04	%close all;

05

06	%Generating a hexagon with centre (0,0)and radius 1.4

07

08	t=linspace(0,2*pi,7);

09	ahx=0+1.4*cos(t);

10	bhx=0+1.4*sin(t);

11	plot(ahx,bhx);

12	plot(0,0,'ro');

13

grid on

14

hold on

15

16	% To generate 6 adjacent hexagon

17

18	a1=0+1.4*cos(t);                        % Upper hex

19	b1=2.42+1.4*sin(t);

20	plot(a1,b1);

21	plot(0,2.42,'ko');

22

23	a2=0+1.4*cos(t);                        % Lower hex

24	b2=-2.42+1.4*sin(t);

25	plot(a2,b2);

26	plot(0,-2.42,'ko');

27

28	a3=2.1+1.4*cos(t);                      % Right lower hex

29	b3=-1.21+1.4*sin(t);

30	plot(a3,b3);

31	plot(2.1,-1.21,'ko');

32

33	a4=2.1+1.4*cos(t);                      % Right upper hex

34	b4=1.21+1.4*sin(t);

35	plot(a4,b4);

36	plot(2.1,1.21,'ko');

37

38	a5=-2.1+1.4*cos(t);                     % Left upper hex

39	b5=1.21+1.4*sin(t);

40	plot(a5,b5);

41	plot(-2.1,1.21,'ko');

42

43	a6=-2.1+1.4*cos(t);                     % Left lower hex

44	b6=-1.21+1.4*sin(t);

45	plot(a6,b6);

46	plot(-2.1,-1.21,'ko');

47

48	for i=1:250

49	xa=-0.75+1.5*rand(1,1);

50	ya=-1.2+2.4*rand(1,1);

51	xra(i)=xa;

52	yra(i)=ya;

53

54	xb=-1+2*rand(1,1);

55	yb=-0.65+1.3*rand(1,1);

56	xrb(i)=xb;

57	yrb(i)=yb;

58

59

figure(1)

60	plot(xra(i),yra(i),'k.');

61

hold on

62	plot(xrb(i),yrb(i),'k.');

63

64

end